Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/CE7287309A9811EBAC99AD22C4F9AE02.roa
File:                     CE7287309A9811EBAC99AD22C4F9AE02.roa (raw, json)
Hash identifier:          ytjO5Xi8YzAYm/HJYiXYe8ySsjXr7Gk7Uu4hZdXaaG0=
Subject key identifier:   98:0B:B4:14:5D:58:44:2B:CB:E3:31:DB:51:0A:9E:C5:16:86:78:BD
Certificate issuer:       /CN=A913E7CA/serialNumber=FFB503F202320CD86973AFE61A16FBB5C6F28D64
Certificate serial:       06C3
Authority key identifier: FF:B5:03:F2:02:32:0C:D8:69:73:AF:E6:1A:16:FB:B5:C6:F2:8D:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/CE7287309A9811EBAC99AD22C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:57:55 +0000
ROA not before:           Fri 28 Mar 2025 23:24:03 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     141773
IP address blocks:        103.163.210.0/23 maxlen: 23
                          103.163.210.0/24 maxlen: 24
                          103.163.211.0/24 maxlen: 24
                          2001:df6:2780::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl
                          rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1731 (0x6c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E7CA, serialNumber=FFB503F202320CD86973AFE61A16FBB5C6F28D64
        Validity
            Not Before: Mar 28 23:24:03 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a429c2-a849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:fb:ff:f1:9e:0a:c1:de:22:c1:99:e5:4c:
                    22:39:4b:5b:93:74:5c:eb:d1:4f:3a:83:48:32:98:
                    e3:7f:9d:5f:3f:d2:69:7c:ba:39:e4:2f:ff:b4:c7:
                    62:da:cf:80:6d:9c:2c:74:78:1f:e6:ba:60:ff:71:
                    5e:6b:c6:54:ba:d6:ca:5f:03:f8:90:36:35:04:d3:
                    3f:66:a1:9d:21:e8:dc:34:89:4f:4e:2f:5a:71:d8:
                    fd:15:8e:20:aa:72:6d:68:6e:d2:e8:6b:aa:72:48:
                    21:2d:cf:69:f7:eb:90:ff:07:21:2b:d0:af:3b:f1:
                    92:e1:78:61:85:c7:01:cc:d0:9c:d2:a4:29:5e:77:
                    25:ad:f0:ed:1f:92:5d:9f:79:c6:68:99:c6:4b:04:
                    bb:51:12:a1:b7:f6:25:9a:52:30:fc:0d:54:6d:33:
                    65:ea:24:7a:c5:fa:39:25:aa:3d:aa:da:54:8e:29:
                    ed:d4:69:2e:c8:b1:bb:1f:62:fe:ff:77:7b:25:f5:
                    be:6e:a2:56:2e:2e:80:06:e8:8a:0f:d6:50:31:b7:
                    a5:49:a7:2a:97:09:57:1a:43:d8:fa:d5:8c:23:92:
                    85:c3:e2:f7:61:ed:43:05:ba:9c:9d:90:8c:47:b9:
                    15:0b:be:1e:17:b1:b1:8f:26:32:db:3b:a6:62:46:
                    27:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0B:B4:14:5D:58:44:2B:CB:E3:31:DB:51:0A:9E:C5:16:86:78:BD
            X509v3 Authority Key Identifier:
                keyid:FF:B5:03:F2:02:32:0C:D8:69:73:AF:E6:1A:16:FB:B5:C6:F2:8D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/CE7287309A9811EBAC99AD22C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.210.0/23
                IPv6:
                  2001:df6:2780::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:65:76:70:8e:0a:84:c4:41:60:f5:57:29:bf:68:9a:bf:29:
         b3:15:1b:82:f3:ac:06:98:27:4e:d8:89:0f:86:30:fb:96:1d:
         fb:32:dd:ef:90:fe:88:20:cd:89:bd:ba:f4:57:4b:ce:14:0e:
         1b:0a:b3:dc:ba:37:b4:e0:79:e7:81:b0:ff:1d:9a:ca:e9:f1:
         df:6c:54:3e:32:41:0f:1f:52:4c:10:cf:b4:f1:d7:2b:7b:bb:
         cc:3f:c4:55:3b:53:53:7f:e6:d3:93:d7:c7:cb:3e:36:ed:84:
         6e:aa:9f:55:06:c1:6f:22:e9:cf:22:1f:10:57:e5:b6:d5:31:
         cb:fb:85:c7:0a:7f:42:e3:fc:70:d6:b1:7a:56:17:d8:3f:a6:
         49:1f:67:54:d7:45:d0:84:d7:ce:12:67:76:1b:cb:d2:98:f1:
         df:1c:7a:40:e7:a6:bc:5d:69:a5:cd:4d:df:49:c5:6b:c7:c1:
         61:ec:3e:a1:6c:89:b2:a2:6a:c1:54:d6:8f:38:52:e3:c8:7d:
         32:a0:c4:ba:14:29:eb:23:9b:cd:bf:ea:1d:7e:96:ce:aa:eb:
         da:73:40:26:3f:a5:79:fd:46:a4:98:d4:ea:d8:a3:55:a0:2c:
         46:cf:9b:35:98:ea:af:d2:70:52:0f:72:08:f8:b2:06:7d:39:
         94:73:d5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:37 2026 by rpki-client